CVE-2024-12833
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Feb 11, 2025
Updated: Feb 18, 2025
CWE ID 79
Summary
CVE-2024-12833 is a SNMP cross-site scripting (XSS) authentication bypass vulnerability affecting Paessler PRTG Network Monitor. This issue permits network-adjacent attackers to bypass the system's authentication on vulnerable installations. The flaw lies within the PRTG Network Monitor web interface, where user-supplied data lacks proper validation, enabling the injection of arbitrary scripts. Consequently, an attacker can exploit this vulnerability to circumvent authentication on the affected system. (ZDI-CAN-23371)
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- PRTG Network Monitor
Affected Vendors
- Paessler AG